Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
File:                     SAGluBYVjweoyorLN-l-LyCwaRE.mft (raw, json)
Hash identifier:          PGX81HW892YupEIkOFgirQTRLfM9Z7He0xAhFgFh+00=
Subject key identifier:   C0:19:3E:93:A9:CF:37:AA:D3:35:33:E7:C1:33:E1:DB:11:25:0B:45
Authority key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
Certificate issuer:       /CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Certificate serial:       01962F742E9FB89FFBB50F38D0606DA790C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
Manifest number:          12E9
Signing time:             Sun 13 Apr 2025 14:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:05 +0000
Files and hashes:         1: SAGluBYVjweoyorLN-l-LyCwaRE.crl (hash: zRw4KqJzThyduL7DuClocjl/kHEof4fxcJ3dK4r+g50=)
                          2: V2Y4d-TLmNFHJ4lClsc4ERneXIs.roa (hash: PHo5kCdxREAK30hAhZYcMgPNVkKaDt5dMWxCCahvYBE=)
                          3: bazUCWmUnVsUPI48K1m2IjF_KYM.roa (hash: AyYWdQS+wgobcYMMdY+5yoadUDioqr0YVD4DAeG57TU=)
                          4: vG2nuL1igzgqWJUWOISEpJLLdWQ.roa (hash: eVGIn7eVFi1uovTluqkckWewyyXRYQcdEO/+J7uhkjQ=)
                          5: z4qyX-331qkRpNendrVE2vuUwMg.roa (hash: 1tgnSBh6zavqUvITN/dHmAA7avLexZgbuVDSxY+JNpI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:2e:9f:b8:9f:fb:b5:0f:38:d0:60:6d:a7:90:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
        Validity
            Not Before: Apr 13 14:01:05 2025 GMT
            Not After : Apr 14 14:01:05 2025 GMT
        Subject: CN=c0193e93a9cf37aad33533e7c133e1db11250b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:53:4a:bb:d6:1d:e2:d7:32:7e:e3:27:ce:b1:
                    af:66:07:fb:a9:d2:7b:64:f5:95:42:e5:52:9b:dc:
                    f2:e9:19:62:f7:26:78:2f:0a:11:3f:8b:73:2d:7a:
                    87:34:77:42:ae:da:99:a9:2f:49:c6:dd:59:2b:ea:
                    5a:f7:2c:5a:52:69:23:70:5c:7e:a3:43:cc:fa:fd:
                    c4:af:66:fd:0d:19:51:d8:21:d8:b1:6b:50:7d:7f:
                    00:1d:af:22:91:aa:6e:bd:ab:b7:5f:33:9c:44:c8:
                    27:8b:ca:58:b8:2a:09:30:68:0a:67:f5:85:b1:be:
                    5d:08:80:f0:07:79:ac:1e:65:1d:b2:6b:aa:0b:5e:
                    8d:7f:8d:31:1f:e6:e3:e9:54:9e:6b:00:d5:d8:9e:
                    f9:58:7a:93:9e:c6:2e:0c:d0:60:19:6c:6f:bf:77:
                    08:32:da:c1:5a:0c:81:b3:3b:89:0b:5e:8e:90:04:
                    82:29:4b:3b:ca:05:70:6e:a8:5e:23:91:cb:10:94:
                    fb:0a:ae:50:3e:5a:b6:b1:5e:4d:de:88:6a:be:ec:
                    55:e6:7e:be:4a:30:ea:37:55:f0:36:ce:95:d8:f2:
                    a4:18:83:9b:42:b1:1b:6b:3b:11:bc:e7:8d:fa:28:
                    d4:09:3b:1a:63:a0:8d:ee:77:3d:78:6a:e2:92:7f:
                    ac:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:19:3E:93:A9:CF:37:AA:D3:35:33:E7:C1:33:E1:DB:11:25:0B:45
            X509v3 Authority Key Identifier:
                keyid:48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:f6:a1:f1:43:29:f4:ee:b4:dd:97:31:0e:26:24:ea:b5:db:
         dd:db:ad:82:63:f4:e2:fe:30:43:df:63:94:5e:01:d7:f7:a2:
         09:83:f0:a8:3b:cf:d0:de:ae:0d:32:6d:7a:2d:d6:d9:85:1d:
         11:47:f3:2c:31:63:25:ad:e6:46:67:e6:5a:72:7c:51:b3:6a:
         de:a5:63:d3:e4:ce:17:80:8a:cb:7a:d9:c7:66:ae:5c:86:c9:
         42:f1:62:f9:42:de:b8:7b:f1:64:09:0b:81:7f:aa:b1:64:0e:
         a1:5c:b8:fa:c2:0f:ec:fd:a3:41:b3:72:20:9c:e7:75:37:90:
         3c:6f:34:f7:8e:46:63:bb:e3:61:75:b2:0e:83:cc:d9:83:40:
         c7:93:ec:ff:72:1d:28:e8:ca:e8:05:eb:83:fb:7b:6a:5f:48:
         b5:ff:0c:8d:24:c5:49:f1:69:53:db:7d:27:40:be:80:e9:19:
         89:11:c6:b0:08:80:58:36:fe:c8:97:ea:11:38:ce:ea:e9:92:
         d9:06:d0:a5:35:37:77:31:94:1d:f4:d0:6b:87:67:b2:f8:39:
         00:1f:71:3b:48:b6:37:3b:b9:85:12:a4:8d:86:e6:d1:8c:c5:
         be:bb:3f:49:b8:cf:4c:87:47:db:77:3f:f1:4f:c6:ef:3c:58:
         90:ad:7e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----